From d6f0c2b52b4bb0438d05bb26bed8825a15fbd923 Mon Sep 17 00:00:00 2001 From: Maxim Zalysin Date: Sun, 9 Oct 2016 16:56:04 +0300 Subject: [PATCH] Add support PowerDNS API (#322) * Add support PowerDNS API * Small fixes --- README.md | 3 +- acme.sh | 7 +++ dnsapi/README.md | 27 ++++++++-- dnsapi/dns_pdns.sh | 127 +++++++++++++++++++++++++++++++++++++++++++++ 4 files changed, 160 insertions(+), 4 deletions(-) create mode 100755 dnsapi/dns_pdns.sh diff --git a/README.md b/README.md index 1e3623e8..c207704b 100644 --- a/README.md +++ b/README.md @@ -241,7 +241,8 @@ You don't have do anything manually! 4. Godaddy.com API 5. OVH, kimsufi, soyoustart and runabove API 6. AWS Route 53, see: https://github.com/Neilpang/acme.sh/issues/65 -7. lexicon dns api: https://github.com/Neilpang/acme.sh/wiki/How-to-use-lexicon-dns-api +7. PowerDNS API, see: https://doc.powerdns.com/md/httpapi/README/ +8. lexicon dns api: https://github.com/Neilpang/acme.sh/wiki/How-to-use-lexicon-dns-api (DigitalOcean, DNSimple, DnsMadeEasy, DNSPark, EasyDNS, Namesilo, NS1, PointHQ, Rage4 and Vultr etc.) ##### More APIs are coming soon... diff --git a/acme.sh b/acme.sh index c385beb3..9387dcec 100755 --- a/acme.sh +++ b/acme.sh @@ -3173,6 +3173,13 @@ _initconf() { # #GD_Secret=\"sADDsdasdfsdfdssdgdsf\" +####################### +#PowerDNS: +#PDNS_Url=\"http://ns.example.com:8081\" +#PDNS_ServerId=\"localhost\" +#PDNS_Token=\"0123456789ABCDEF\" +#PDNS_Ttl=60 + " > $ACCOUNT_CONF_PATH fi } diff --git a/dnsapi/README.md b/dnsapi/README.md index 5aa52cdf..e17406e3 100644 --- a/dnsapi/README.md +++ b/dnsapi/README.md @@ -66,7 +66,7 @@ The `CX_Key` and `CX_Secret` will be saved in `~/.acme.sh/account.conf`, when n ## Use Godaddy.com domain api to automatically issue cert -We support Godaddy integeration. +We support Godaddy integration. First you need to login to your Godaddy account to get your api key and api secret. @@ -89,6 +89,29 @@ acme.sh --issue --dns dns_gd -d aa.com -d www.aa.com The `GD_Key` and `GD_Secret` will be saved in `~/.acme.sh/account.conf`, when next time you use cloudflare api, it will reuse this key. +## Use PowerDNS embedded api to automatically issue cert + +We support PowerDNS embedded API integration. + +First you need to enable api and set your api-token in PowerDNS configuration. + +https://doc.powerdns.com/md/httpapi/README/ + +``` +export PDNS_Url="http://ns.example.com:8081" +export PDNS_ServerId="localhost" +export PDNS_Token="0123456789ABCDEF" +export PDNS_Ttl=60 + +``` + +Ok, let's issue cert now: +``` +acme.sh --issue --dns dns_pdns -d aa.com -d www.aa.com +``` + +The `PDNS_Url`, `PDNS_ServerId`, `PDNS_Token` and `PDNS_Ttl` will be saved in `~/.acme.sh/account.conf`. + ## Use OVH/kimsufi/soyoustart/runabove API https://github.com/Neilpang/acme.sh/wiki/How-to-use-OVH-domain-api @@ -109,8 +132,6 @@ acme.sh --issue --dns dns_myapi -d aa.com -d www.aa.com For more details, please check our sample script: [dns_myapi.sh](dns_myapi.sh) - - # Use lexicon dns api https://github.com/Neilpang/acme.sh/wiki/How-to-use-lexicon-dns-api diff --git a/dnsapi/dns_pdns.sh b/dnsapi/dns_pdns.sh new file mode 100755 index 00000000..842a5b82 --- /dev/null +++ b/dnsapi/dns_pdns.sh @@ -0,0 +1,127 @@ +#!/usr/bin/env sh + +#PowerDNS Emdedded API +#https://doc.powerdns.com/md/httpapi/api_spec/ +# +#PDNS_Url="http://ns.example.com:8081" +#PDNS_ServerId="localhost" +#PDNS_Token="0123456789ABCDEF" +#PDNS_Ttl=60 + +######## Public functions ##################### +#Usage: add _acme-challenge.www.domain.com "123456789ABCDEF0000000000000000000000000000000000000" +dns_pdns_add() { + fulldomain=$1 + txtvalue=$2 + + if [ -z "$PDNS_Url" ] ; then + _err "You don't specify PowerDNS address." + _err "Please set PDNS_Url and try again." + return 1 + fi + + if [ -z "$PDNS_ServerId" ] ; then + _err "You don't specify PowerDNS server id." + _err "Please set you PDNS_ServerId and try again." + return 1 + fi + + if [ -z "$PDNS_Token" ] ; then + _err "You don't specify PowerDNS token." + _err "Please create you PDNS_Token and try again." + return 1 + fi + + if [ -z "$PDNS_Ttl" ] ; then + PDNS_Ttl=60 + fi + + #save the api addr and key to the account conf file. + _saveaccountconf PDNS_Url "$PDNS_Url" + _saveaccountconf PDNS_ServerId "$PDNS_ServerId" + _saveaccountconf PDNS_Token "$PDNS_Token" + + _debug "First detect the root zone" + if ! _get_root $fulldomain ; then + _err "invalid domain" + return 1 + fi + _debug _domain "$_domain" + + if ! set_record "$_domain" "$fulldomain" "$txtvalue" ; then + return 1 + fi + + return 0 +} + +set_record() { + _info "Adding record" + root=$1 + full=$2 + txtvalue=$3 + + if ! _pdns_rest "PATCH" "/api/v1/servers/$PDNS_ServerId/zones/$root." "{\"rrsets\": [{\"name\": \"$full.\", \"changetype\": \"REPLACE\", \"type\": \"TXT\", \"ttl\": $PDNS_Ttl, \"records\": [{\"name\": \"$full.\", \"type\": \"TXT\", \"content\": \"\\\"$txtvalue\\\"\", \"disabled\": false, \"ttl\": $PDNS_Ttl}]}]}" ; then + _err "Set txt record error." + return 1 + fi + if ! _pdns_rest "PUT" "/api/v1/servers/$PDNS_ServerId/zones/$root./notify" ; then + _err "Notify servers error." + return 1 + fi + return 0 +} + +#################### Private functions bellow ################################## +#_acme-challenge.www.domain.com +#returns +# _domain=domain.com +_get_root() { + domain=$1 + i=1 + p=1 + + if _pdns_rest "GET" "/api/v1/servers/$PDNS_ServerId/zones" ; then + _zones_response=$response + fi + + while [ '1' ] ; do + h=$(printf $domain | cut -d . -f $i-100) + if [ -z "$h" ] ; then + return 1 + fi + + if printf "$_zones_response" | grep "\"name\": \"$h.\"" >/dev/null ; then + _domain=$h + return 0 + fi + + p=$i + i=$(expr $i + 1) + done + _debug "$domain not found" + return 1 +} + +_pdns_rest() { + method=$1 + ep=$2 + data=$3 + + _H1="X-API-Key: $PDNS_Token" + + if [ ! "$method" = "GET" ] ; then + _debug data "$data" + response="$(_post "$data" "$PDNS_Url$ep" "" "$method")" + else + response="$(_get "$PDNS_Url$ep")" + fi + + if [ "$?" != "0" ] ; then + _err "error $ep" + return 1 + fi + _debug2 response "$response" + + return 0 +} \ No newline at end of file